What We Collect and Why We Hold It
When you open an account with us, we collect the information you provide directly — your name, contact details, and the payment method you use to fund your wallet, whether that is Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX. Transaction records tied to those
-
1
funding methods are retained to verify account activity and process any withdrawal requests accurately. We also collect device identifiers and session data — the kind of signals your phone or browser sends when you load the lobby — because they help us detect unusual access and
-
2
keep your account secure. Cookies are used to maintain your session state, so your preferences persist between visits without you needing to reset them each time. We do not sell your personal data to third parties. Where we share it — for example, with payment processors
-
3
or fraud-detection services — we do so under data-processing agreements that bind those parties to the same handling standards we apply internally. Data is retained for as long as your account remains active and for any period required by the applicable laws of the jurisdiction where
-
4
we operate. If your account is closed, we will retain only what the law requires us to keep, and nothing more. Access to your data within our systems is restricted to staff whose role specifically requires it. Where local law permits us to serve you, these
-
5
same collection and retention practices apply consistently.
Service availability depends on eligible regions and local law. Users should check local rules before opening an account.